
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json)
Hash identifier: BWJgCmWEIfE4sAxdrQGGsn4tFYZW6bmTHbPDsLHF6Iw=
Subject key identifier: 39:B9:67:8C:95:8E:ED:76:93:2A:E6:82:CA:12:FA:81:DC:D7:19:7B
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial: 0CAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
Manifest number: 0C9B
Signing time: Thu 24 Sep 2026 18:34:10 +0000
Manifest this update: Thu 24 Sep 2026 18:34:09 +0000
Manifest next update: Thu 01 Oct 2026 18:34:09 +0000
Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: 3GWysCIAv5rWEabHgNWgslNnQMdejDYL2ghTrV6Z6mM=)
2: gaigrVptORi_V-5aeHdbaZ-DKd8.asa (hash: H2WThgOY0LjX4O882KOf/4tpb6MpDlDw7w0U01/EuLM=)
3: 059432729E6A11EEB0983523C4F9AE02.roa (hash: 0DMnke4ej/rRMTSX/s1HLfKLH/EhQb8wlXMX/qnYspw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Validity
Not Before: Sep 24 18:34:09 2026 GMT
Not After : Oct 1 18:34:09 2026 GMT
Subject: CN=6ab56d21-17dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:80:60:5d:51:7a:cd:09:ca:e4:fd:d3:8d:
e2:e5:f4:9a:93:40:20:66:cd:ff:c3:5e:1f:4e:27:
39:f1:9e:c2:fa:56:5c:00:4e:17:70:9c:a1:04:f8:
28:2a:41:ce:df:69:63:87:78:3c:45:16:fd:4c:31:
eb:40:8e:db:3d:03:f6:c6:16:b6:26:9b:d9:93:c7:
18:7a:b8:f6:80:4b:66:05:bb:83:a1:95:66:b8:dd:
92:eb:ad:16:78:96:3a:de:dd:83:59:18:24:1f:8c:
76:1f:ea:e7:19:0c:b1:5d:68:45:dc:8e:15:99:15:
1f:e6:00:ff:12:18:4d:df:70:bf:6d:05:47:1f:98:
c7:94:43:ea:a4:9f:9e:1e:86:04:7c:6d:d0:ca:7c:
8b:4c:c5:12:1e:8e:1d:3e:32:35:5b:81:9d:f0:46:
54:43:98:e8:59:12:49:f5:26:f7:de:88:05:40:3c:
40:4f:e6:77:a8:da:38:bb:ce:73:77:99:85:58:7f:
ca:87:cc:dd:79:8c:d2:b4:83:85:95:43:de:22:89:
8c:27:e1:8a:65:1a:8e:e9:6d:9d:08:8a:89:d3:ad:
c7:07:ff:5f:dc:95:f1:6c:98:7f:4b:d2:72:94:5a:
b8:0f:bc:d1:84:db:a4:bd:59:8a:2f:a7:f3:49:90:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:67:8C:95:8E:ED:76:93:2A:E6:82:CA:12:FA:81:DC:D7:19:7B
X509v3 Authority Key Identifier:
keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:76:49:ca:32:af:79:bc:b9:ad:11:61:6a:d1:2d:61:ab:ed:
34:e5:91:9a:ee:c8:6e:f4:a7:30:fc:d2:f4:af:e0:76:22:f2:
22:7e:1a:e2:c5:b7:ab:14:38:24:12:e7:73:97:19:b0:9d:aa:
b5:40:46:a7:09:0c:d2:34:3d:49:93:5f:08:59:72:25:4e:e0:
dd:18:08:06:0a:76:19:d7:8e:80:b9:70:eb:a7:c7:8f:74:06:
9b:ab:19:2b:82:86:77:cd:21:06:98:6c:9d:07:53:64:b6:81:
f5:8a:ef:10:28:bc:44:9b:b1:0d:ab:69:16:e2:c1:52:18:da:
6f:91:c2:8d:20:cd:26:3a:00:9a:5e:89:eb:3a:53:f3:f6:cc:
4f:8f:11:63:32:0c:f6:bd:d2:72:fa:7c:4e:59:a8:60:6f:6a:
f7:70:3c:d5:2d:73:44:ce:e2:e5:20:82:7f:f1:14:12:dd:e5:
15:f3:c5:30:65:f4:98:19:1d:17:91:91:4b:ba:6c:3c:ce:2f:
07:0b:ac:f7:b4:31:03:77:69:68:98:23:56:98:e8:12:8c:6a:
43:b2:5a:2a:df:9b:44:1b:90:8a:48:f8:de:75:0c:52:18:73:
1b:bd:53:1e:8f:dc:d3:70:61:29:6e:b2:8c:ce:d1:cb:55:15:
11:80:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:40:45 2026 by rpki-client